Seven TRON addresses sanctioned over alleged Tren de Aragua ATM attacks

UNCLASSIFIEDSeven TRON addressessanctioned over alleged Tren deAragua ATM attacks18IMPORTANCECLOSED2NEWS MEDIA2PIECESOct 1, 2026 00:39blockboard.net
In TRON

The Treasury Department sanctioned seven TRON addresses and 10 people or entities tied to an ATM jackpotting network linked to Tren de Aragua. One report says the network was connected to a fraud scheme that Treasury identified as a revenue source for the group, while another says the action also reached a high-ranking TdA leader.

Share on X Share on Telegram Share on Reddit Share on WhatsApp

What this rests on

Claim by claim, with its source
✓
The action covered 10 individuals and entities tied to an ATM network that allegedly used malware and cryptocurrency to move proceeds from U.S. thefts.
Treasury Targets TdA-Linked ATM Network and Seven TRON Addresses
✓
The Treasury Department added seven TRON addresses to its sanctions list over an alleged ATM jackpotting operation tied to Tren de Aragua.
Seven TRON addresses sanctioned over alleged Tren de Aragua ATM attacks
✓
Treasury’s September 30 designation also included a high-ranking Tren de Aragua leader.
Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S.
✓
One report says the scheme was linked to more than 1,500 jackpotting attacks that drained $40,730,000 from U.S. banks.
Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S.

What it means

Who it affects, what changes and what is still unconfirmed

Each sentence links inside to the piece that supports it.

People and firms watching sanctions, including TRON users and compliance teams, would see seven addresses newly listed and a broader set of 10 people and entities named in the action. That changes which addresses and named targets now sit on the sanctions list, and the designation also reaches a high-ranking Tren de Aragua leader.

Before this action, the network was not described in these pieces as having seven listed TRON addresses and 10 named targets in the same Treasury move. What stays the same is that the underlying activity is still described as an ATM jackpotting scheme tied to TdA and involving malware and cryptocurrency.

Market reaction

TR TRON the event is about this asset from 2 h before to 4 h after the line marks the first headline
published
+0.13 % before publication
-0.01 % after
$0price at publication
12series points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 1 08:15
+4 h 59 m
Oct 1 13:15

Has this happened before?

WhenWhat happenedFigure
17 days ago TRON DAO Celebrates Canary Staked TRX ETF (Ticker: TRXS) Debut With Cboe Closing Bell in Chicago event 1 actors in common · 4 news media
17 days ago Bitcoin Hovers at $84K as Treasury Yields Hold Near Multi-Year Highs event 1 actors in common · 4 news media
17 days ago Bitget Got Hacked. Why Is THORChain on Trial? event 1 actors in common · 11 news media
18 days ago Tether Freezes Nearly $550 Million in Iran-Linked USDT This Year event 1 actors in common · 12 news media
19 days ago Binance Wallet lets users pay gas fees in USDT across four major networks event 1 actors in common · 4 news media